Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/34352e3137372e3134342e302f32322d3235203d3e20323634373332.roa
File:                     34352e3137372e3134342e302f32322d3235203d3e20323634373332.roa (raw, json)
Hash identifier:          IVP+GGSShRNO9+8IbstmyKKX5Xv17SOhIv3tU9eU1Dc=
Subject key identifier:   E1:7C:D5:BA:B6:59:8C:26:BF:E8:DB:28:07:B6:E2:73:15:33:A6:A3
Certificate issuer:       /CN=1F4C8E2A50993D70AF79E87C7E1B8660979E2614
Certificate serial:       2BA3CAEC8C7ADB20DFFFA83850578DB93CAE892C
Authority key identifier: 1F:4C:8E:2A:50:99:3D:70:AF:79:E8:7C:7E:1B:86:60:97:9E:26:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/34352e3137372e3134342e302f32322d3235203d3e20323634373332.roa
Signing time:             Tue 04 Feb 2025 18:55:54 +0000
ROA not before:           Tue 04 Feb 2025 18:50:54 +0000
ROA not after:            Tue 03 Feb 2026 18:55:54 +0000
asID:                     264732
IP address blocks:        45.177.144.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.crl
                          rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 07:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a3:ca:ec:8c:7a:db:20:df:ff:a8:38:50:57:8d:b9:3c:ae:89:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C8E2A50993D70AF79E87C7E1B8660979E2614
        Validity
            Not Before: Feb  4 18:50:54 2025 GMT
            Not After : Feb  3 18:55:54 2026 GMT
        Subject: CN=E17CD5BAB6598C26BFE8DB2807B6E2731533A6A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:81:e4:88:6e:4f:6a:20:27:0d:ea:ff:c5:
                    8a:6a:6e:4d:4a:07:63:89:b2:49:44:06:43:22:74:
                    cc:7f:7d:98:55:50:6b:19:e9:17:bb:b2:36:4d:3e:
                    aa:8e:62:d9:48:36:02:5a:00:32:94:13:5e:01:f2:
                    3f:37:42:c0:44:43:c9:14:ca:2e:e2:7d:7a:ed:a7:
                    bf:7f:a0:bf:60:fd:5f:ad:27:d4:55:59:b3:b3:a5:
                    75:1d:a4:bc:67:f1:2d:31:40:bb:cf:7a:a9:e0:bd:
                    d2:c7:ce:06:01:c4:1c:dc:0c:a4:06:ad:dd:81:fa:
                    48:24:84:c7:54:f4:65:15:b0:35:50:02:1a:35:ab:
                    60:d3:4d:1f:2c:86:82:ed:b4:2b:67:99:2f:65:68:
                    c6:20:be:9a:93:24:4c:24:b8:50:6b:29:ae:5e:a2:
                    68:71:0d:fe:e9:7c:d6:93:54:34:93:11:5f:bc:0f:
                    03:d1:1c:46:18:b4:89:58:49:78:1f:8f:c8:57:b2:
                    06:fc:6b:96:b3:f6:c6:df:07:81:df:3b:80:65:47:
                    da:97:ee:cc:cd:db:ed:3e:e5:bd:1a:4c:4e:63:7a:
                    0e:83:80:f4:d8:69:aa:a1:c9:d6:9d:78:1e:05:24:
                    69:65:67:dd:c8:74:b9:37:3f:c7:57:b4:d7:ee:1a:
                    e1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7C:D5:BA:B6:59:8C:26:BF:E8:DB:28:07:B6:E2:73:15:33:A6:A3
            X509v3 Authority Key Identifier:
                keyid:1F:4C:8E:2A:50:99:3D:70:AF:79:E8:7C:7E:1B:86:60:97:9E:26:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/34352e3137372e3134342e302f32322d3235203d3e20323634373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:b1:f4:6b:70:c2:2c:5d:3e:d2:9a:d8:0f:87:bc:c2:8a:b6:
         bd:ee:40:1f:73:e8:7a:c9:96:93:d0:8f:6d:78:76:38:c0:74:
         3b:59:7e:8f:a2:4a:6a:1d:74:4c:34:ff:3a:80:62:01:1f:81:
         f4:22:7a:74:7c:ad:7a:15:5e:a1:ea:78:96:5e:03:4e:c6:43:
         61:e7:ae:44:1d:cf:71:77:cd:a1:35:02:32:45:6d:78:cc:f8:
         1a:b2:3a:28:79:73:f5:e3:b7:43:9d:45:b0:34:5e:2e:fc:70:
         11:c6:bd:20:5d:ac:d9:14:ea:ff:b4:be:2d:b3:28:b4:19:eb:
         c5:d3:ed:a1:b3:08:3c:83:c9:c3:4d:45:85:7e:83:b6:4b:c6:
         ce:00:f5:32:15:26:dc:55:64:26:0b:72:ff:de:dc:d1:85:53:
         1d:08:7c:3c:50:bf:dc:fb:73:e1:ea:91:96:e7:64:9f:56:b8:
         54:81:52:8c:bd:6b:ca:fa:62:8e:61:a9:26:b8:b9:49:d2:41:
         f3:1d:1a:14:e8:97:e8:e4:7b:ea:e6:61:ff:fa:26:c6:67:a1:
         4f:21:f7:20:7d:df:26:18:4b:72:6c:9e:ae:01:71:0e:c2:8b:
         73:d8:24:04:ad:7f:18:ca:fc:ce:fd:3a:fa:f3:e9:e9:1f:aa:
         d6:8d:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:22:50 2025 by rpki-client